CVE Intelligence
Analysis AI-assisted

CVE-2026-0756: github-kanban-mcp-server Command Injection in execAsync Leading to Remote Code Execution

CVE-2026-0756 is a critical OS command injection flaw (CWE-78) in github-kanban-mcp-server, reported by ZDI with a CVSS score of 9.8. According to the record, the create_issue parameter is not validated before it is used in a system call, and no authentication is required. The CISA KEV catalog does not list this CVE, and the sources consulted show no confirmed exploitation, but no fixed version is listed.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

The ZDI advisory describes a command injection flaw in github-kanban-mcp-server, tracked as CVE-2026-0756. The issue lies in how the create_issue parameter is handled: a user-supplied string is used to run a system call without proper validation. According to the record, no authentication is required. The advisory is available at ZDI-26-022.

Impact

  • The source description states that remote attackers can execute arbitrary code in the context of the service account.
  • The CVSS score recorded is 9.8 (critical), with high confidentiality, integrity and availability impact as reported by the sources.
  • The real impact depends on the privileges of the service account, which the record does not specify.

Affected products and versions

  • Product: github-kanban-mcp-server.
  • Version listed in the record: 0.3.0.
  • Whether other versions are affected is unknown from the available information.

Exploitation status

  • The record shows that this CVE is not listed in the CISA KEV catalog.
  • No confirmed exploitation in the wild appears in the sources consulted.
  • The SSVC fields in the record show exploitation as 'none' and automatable as 'yes'. Automatable means the flaw could be automated, not that it has been.

Remediation and mitigation

  • The record lists no fixed version. Check the project maintainers for an update or a change that addresses the create_issue handling.
  • Until a fix is confirmed, limit network access to the service to trusted clients only.
  • Run the service under a dedicated, low-privilege account with restricted filesystem and network access.
  • Where practical, disable or restrict the create_issue functionality until the software is verified as patched.

Detection guidance

  • Review service logs for create_issue requests from unexpected or unknown sources.
  • Monitor for unexpected child processes started by the service process.
  • Watch for unexpected outbound connections or new files created by the service account.

Limitations of the available information

  • The record contains no vendor advisory, no fixed version and no details beyond the ZDI description.
  • Exploitation status reflects only the KEV listing and the sources consulted, and may change.
  • EPSS values are reported as recorded and may change over time.

Frequently asked questions

What is CVE-2026-0756?

It is a critical OS command injection vulnerability (CWE-78) in github-kanban-mcp-server, reported by ZDI. The sources describe remote code execution in the context of the service account without authentication.

Is CVE-2026-0756 being actively exploited?

The record shows it is not listed in the CISA KEV catalog, and no confirmed exploitation appears in the sources consulted. This status may change.

Which version is affected and is there a fix?

The record lists version 0.3.0 as affected. No fixed version is listed in the sources, so check the project maintainers for an update before drawing conclusions about other versions.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.